What is CVE-2025-23410?

CVE-2025-23410 is a critical-severity vulnerability in Gmod Apollo, classified under Relative Path Traversal. CVSS score: 9.8/10. Published 2025-03-05.

How severe is CVE-2025-23410?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Path Traversal in Gmod Apollo

CVE-2025-23410

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types.

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Gmod Apollo — versions 0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2025-23410?: CVE-2025-23410 is a critical-severity vulnerability in Gmod Apollo, classified under Relative Path Traversal. CVSS score: 9.8/10. Published 2025-03-05.
How severe is CVE-2025-23410?: Critical severity. CVSS v3 base score is 9.8 out of 10.